CVE-2024-12214

creationtimestamp| type| source ---|---|--- 2025-01-07 05:16:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgt3bre2e 2025-01-07 07:10:24+00:00| seen| https://t.me/cvedetector/14463 2025-01-07 16:39:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/458...

CVE-2024-12214 WooCommerce HSS Extension for Streaming Video <= 3.31 - Reflected Cross-Site Scripting via videolink Parameter

The WooCommerce HSS Extension for Streaming Video plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘videolink’ parameter in all versions up to, and including, 3.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...